2024

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack

NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthen

NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack m

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by t

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-de

By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdow

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attac

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote atta

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote atta

A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects

A vulnerability has been found in Blood Bank & Donor Management 5.6 and classified as critical. This vulnerability affec

In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerab

The Real-Time Streaming Protocol implementation in the MIB3 infotainment incorrectly handles requests to /logs URI, when

The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulner

Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/back

The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided the

The "tokenKey" value used in user authorization is visible in the HTML source of the login page.

An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It c

The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and

User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS v

An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execut

It is possible to download the configuration backup without authorization and decrypt included passwords using hardcoded

The router console is accessible without authentication at "data" field, and while a user needs to be logged in in order

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destinati

Root user password is hardcoded into the device and cannot be changed in the user interface.

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.

A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6,

Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting

An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and

When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an i

TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via th

File Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via a crafted file.

Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain sensitive information via the l

A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker t

A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an a

An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function.

SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary co

SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary co

SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary co

Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user t

Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escal

An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot,

An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string

An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protectio